Open-source alternatives to S3dns

FestIn - Open S3 Bucket Scanner

S3Scanner is a security tool for auditing public access and misconfigured permissions across S3-compatible storage providers. It functions as a storage auditor and security scanner designed to identify open buckets, enumerate publicly accessible objects, and exfiltrate data from misconfigured cloud environments. The project is distinguished by its integration with message brokers, allowing it to consume target lists for large-scale cloud infrastructure audits. It also provides utilities for dumping the entire contents of misconfigured buckets to local directories and calculating the total siz

Security Tool to Look For Interesting Files in S3 Buckets

reconftw is an attack surface management framework and reconnaissance workflow orchestrator designed to automate the discovery, mapping, and monitoring of external digital assets. It operates as a modular tool-chain pipeline that coordinates a sequence of security tools to perform intelligence gathering and vulnerability scanning. The project distinguishes itself through a cloud-native deployment model that parallelizes scanning workloads across a fleet of remote VPS instances to bypass local resource constraints. It utilizes container-based environment isolation to ensure consistent executio

TruffleHog is a secret scanning tool designed to identify leaked credentials and API keys across version control systems, cloud storage, and filesystems. It functions as a git secret detector that enumerates hidden commits and a cloud storage security auditor for inspecting container images and storage buckets. The project is distinguished by a credential verification engine that tests discovered secrets against service APIs to confirm they are active, which eliminates false positive alerts. It further analyzes these verified credentials to determine the specific access levels and resources t

S3 bucket finder from html,js and bucket misconfiguration testing tool

Chrome and Firefox extension that lists Amazon S3 Buckets while browsing

A security toolkit for Amazon S3

Brute-forces objects within a given bucket using Hashcat mask-like syntax

Collection of scripts and resources for DevSecOps and Automated Incident Response Security

Open source demos, concept and guidance related to the AWS CIS Foundation framework.

scan s3 buckets for security issues

Automating situational awareness for cloud penetration tests.

AWS S3 Bucket/Object Finder

Burp extension that performs a passive scan to identify cloud buckets and then test them for publicly accessible vulnerabilities

Finds Directory Listings or open S3 buckets from a list of URLs

AWS Auditing & Hardening Tool

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Fast, opinionated AWS security scanner. Curated checks. Zero noise. Copy-paste fixes.

Enhance the security of your web applications effortlessly with AWS Firewall Factory. Safeguard your valuable assets through seamless WAF deployment, updates, and staging, all centrally managed with AWS Firewall Manager.

Find AWS S3 buckets and test their permissions.

The format of various s3 buckets is convert in one format. for bugbounty and security testing.

CloudScraper: Tool to enumerate targets in search of cloud resources. S3 Buckets, Azure Blobs, Digital Ocean Storage Space.

All-in-one AWS S3 bucket tool for pentesters.

S3Insights is a platform for efficiently deriving security insights about S3 data through metadata analysis

Yet another open S3 bucket finder